Serial No. 10/796,059 

IN THE CLAIMS: 

The text of all pending claims, (including withdrawn claims) is set forth below. Cancelled 
and not entered claims are indicated with claim number and status only. The claims as listed 
below show added text with underlining and deleted text with str i kothrough . The status of each 
claim is indicated with one of (original), (currently amended), (cancelled), (withdrawn), (new), 
(previously presented), or (not entered). 

Please AMEND claims 2 and 5 in accordance with the following: 

1 . (previously presented) A failure detecting apparatus for detecting network failures, 
based on information obtained from monitor target equipment which is disposed within a 
communication network and which has a plurality of communication interfaces, comprising: 

a storage device storing traffic flow information indicating both an amount of receiving 
traffic and an amount of transmitting traffic in each interface of the monitor target equipment; 

a computation device computing an amount of abnormal traffic using a virtual point set in 
the monitor target equipment as at least one of a start point and an end point, among a plurality 
of segments of traffic inside the monitor target equipment using the traffic flow information, and 
outputting an obtained flow as the amount of abnormal traffic; and 

determination device determining whether there is a network failure, using the amount of 
abnormal traffic, thereby outputting a determined result. 

2. (currently amended) A computer-readable storage medium encoded with a computer 
program that when executed causes a computer to execute a method that detects network 
failures, based on information obtained from monitor target equipment which is disposed within a 
communication network and which has a plurality of communication interfaces, said method 
comprising: 

extracting traffic flow information indicating both an amount of receiving traffic and an 
amount of transmitting traffic in each interface of the monitor target equipment, from a storage 
device of the computer; 

computing an amount of abnormal traffic using a virtual point set in the monitor target 
equipment as at least one of a starting point and an end point , among a plurality of segments of 
traffic inside the monitor target equipment, using the traffic flow information; and 

determining whether there is a network failure, using the amount of the abnormal traffic. 
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3. (previously presented) The computer-readable storage medium according to claim 2, 
wherein said computing includes computing at least one of a first amount of traffic of data 
generated by and outputted from the monitor target equipment, a second amount of traffic of 
data discarded by the monitor target equipment and a third amount of traffic of data transmitted 
to and from a single interface of the monitor target equipment, as the amount of abnormal traffic. 

4. (previously presented) The computer-readable storage medium according to claim 2, 
wherein said computing includes computing a ratio of the amount of abnormal traffic to a total 
amount of the traffic inside the monitor target equipment, and to determine that there is a 
network failure if the ratio of the amount of abnormal traffic exceeds a predetermined threshold 
value. 

5. (currently amended) The computer-readable storage medium according to claim 2, 
wherein said method further comprises setting a virtual point indicating the end or the 

starting point of the traffic inside the monitor target equipment, and 

wherein said computing computes a first traffic flow using each interface and another 
interface as a starting point and an end point , respectively, of the traffic inside the monitor target 
equipment, a second traffic flow using each interface and the virtual point as the starting point 
and the end, respectively, a third traffic flow using the virtual point and each interface as the 
starting point and the end, respectively, and a fourth traffic flow using each interface as both the 
starting point and the end and computes a first total of the second, third and fourth traffic flows 
as the amount of abnormal traffic. 

6. (previously presented) The computer-readable storage medium according to claim 5, 
wherein said computing includes computing a ratio of the amount of abnormal traffic to a 

second total of the first, second, third and fourth traffic flows, and to 

wherein said determining determines that the network failure exists if the ratio of the 
amount of abnormal traffic exceeds a predetermined threshold value. 

Claims 7-11 (cancelled) 
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1 2. (previously presented) A failure detecting apparatus for detecting network failures, 
based on information obtained from monitor target equipment which is disposed within a 
communication network and which has a plurality of communication interfaces, comprising: 

storage means for storing traffic flow information indicating both an amount of receiving 
traffic and an amount of transmitting traffic in each interface of the monitor target equipment; 

computation means for computing an amount of abnormal traffic using a virtual point set 
in the monitor target equipment as at least one of a start point and an end point, among a 
plurality of segments of traffic inside the monitor target equipment using the traffic flow 
information, and outputting an obtained flow as the amount of abnormal traffic; and 

determination means for determining whether there is a network failure, using the 
amount of abnormal traffic, thereby outputting a determined result. 
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